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(57) ABSTRACT 

A method for operating a local area network having a server 
and a plurality of computers. The server includes an Internet 
gateway for directing messages to and from the Internet. 
Each computer in the network has a unique IP address and 
a unique network adapter address associated with that com- 
puter. Each computer determines the network adapter 
address associated with a target IP address by broadcasting 
an address resolution protocol (ARP) message on the local 
area network. The server stores information identifying IP 
addresses in a foreign class corresponding to computers not 
configured for connection to the local area network. The 
server responds to each ARP having a target IP address in the 
foreign class by returning the network adapter address of the 
server in the response message and assigning an IP address 
associated with the local area network to the IP address of 
the computer sending the ARP The server translates each 
outbound message originating on the local area network for 
a destination address in the foreign class by replacing the 
originating IP address in the message with the IP address 
assigned on the local area network. The translated message 
is then sent via the gateway. The sever also examines each 
inbound message received on the gateway for a destination 
IP address associated with the local area network to deter- 
mine if the destination address is an IP address that has been 
assigned to an IP address in said foreign class. If such an 
assignment has been made, the server translates the desti- 
nation IP address. 

24 Claims, 1 Drawing Sheet 
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SYSTEM FOR PROVIDING INTERNET 
ACCESS FROM LOCATIONS DIFFERENT 
FROM THOSE FOR WHICH THE USER'S 
SOFTWARE WAS CONFIGURED 

FIELD OF THE INVENTION 

The present invention relates to computer networks, and 
more particularly, to a computer server that provides Internet 
access to computers configured for a different server without 
requiring reprogramming of the computers. 

BACKGROUND OF THE INVENTION 

The present invention may be more easily understood 
with reference to a mobile computer user who utilizes a 
portable computer that is configured for the computer net- 
work at the user's headquarters. When the user is connected 
to the headquarters' network, the user has high speed access 
to the resources of that network which typically include file 
servers, internet access, and E-Mail. When the user unplugs 
her computer from this network and travels to a hotel, this 
high-speed access is typically lost. 

The most common form of remote access is via a modem 
over a conventional phone line. Since the bandwidth of a 
conventional phone line is much lower than that of a typical 
office network, the time needed to complete any significant 
data transfer from the headquarters' network can he sub- 
stantial. 

To make matters worse, most hotels utilize phone systems 
that are poorly adapted to high-speed digital transmissions. 
The phone systems were designed to accommodate voice 
transmissions having a relatively short duration compared to 
the duration of the average network connection. Hence, if a 
large number of hotel guests are making modem calls to 
connect to their corporate networks, the hotel phone system 
runs out of capacity to service the traffic. In addition, many 
digital PBX systems utilize signal levels that are incompat- 
ible with conventional computer modems, thus making even 
this type of low bandwidth connection impossible. 

Accordingly, systems for providing high-speed network 
access within a hotel or similar facility have been suggested 
to cure these problems. Ideally, the mobile user would plug 
her computer into an Ethernet network at the hotel, which 
includes a server connected to the Internet. The user could 
then enjoy the same high-speed access that was available at 
her corporate headquarters. Furthermore, such a system 
would by-pass the telephone system within the hotel, 
thereby avoiding the capacity problems described above. 

Unfortunately, the software that oversees the network 
connection typically includes addresses that are particular to 
the network. For networks connected to the Internet, each 
computer on the network is assigned an address of the form 
A.B.C.D where A, B, C, and D are 8-bit integers. One of 
these addresses corresponds to the network server that 
connects the local office network to the Internet. A computer 
wishing to communicate with another computer on the 
network, including the server, directs a message to that 
computer using its address. The server is programmed to 
recognize the addresses that are particular to the local area 
network. When the server sees a message for an address that 
is not part of the local area network, the server forwards the 
message to the Internet. Similarly, when the server detects an 
incoming message from the Internet with a destination 
address for one of the computers on the local area network, 
the server transfers that message to the local area network 
and the appropriate computer accepts the message. 

Since the addresses on each local area network are unique, 
when a computer is moved from one local area network to 
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another, the computer's address will not be recognized by 
the server in the new network as being part of that server's 
local area network. Furthermore, a message from the mobile 
computer to the server address it associates with the Internet 
5 will not be recognized by the current server as a request for 
sending a message to an address on the Internet. Hence, a 
new address must be assigned to the business traveler's 
computer when she connects it to the hotel's local area 
network. 

30 One solution to providing the new address requires the 
user to enter an address provided by the hotel server when 
the traveler first logs onto the network. However, this 
solution to the problem requires two reconfigurations of the 
traveler's computer, once when she logs onto the hotel 

35 network and once when she returns to her office network. 
Such reconfiguratioas require expertise that is outside the 
computer skills of the typical business traveler. In addition, 
the business traveler must keep a copy of her old network 
address so that she can reconfigure her computer on return 

20 to her own network. Another solution is to allow the 
traveler's computer to dynamically receive an address from 
the server using a protocol such as DHCP or BO OTP. 
However, since many corporate networks do not use such 
protocols, travelers will still need to reconfigure their com- 

25 puters to enable DHCP or BOOTR Such reconfigurations 
also result in business traveler losing track of her old 
network address. 

A second problem with hotel local area networks arises 
from security concerns. A local area network that connects 

30 all of the guest rooms allows any guest to "see" the contents 
of the computers of another guest if the other guest's 
computer has been programmed to allow file sharing. Such 
sharing may have been setup for use in the headquarters' 
local area network environment. However, it clearly can 

35 pose security problems in the hotel setting. Since the busi- 
ness traveler's computer may have been programmed by her 
company technicians, she may not know that such a security 
problem exists, no less have the technical expertise to turn 
off the file sharing option. 

40 Broadly, it is the object of the present invention to provide 
an improved local area network for use in hotel -like envi- 
ronments. 

It is a further object of the present invention to provide a 
45 local area network that does not require the user to recon- 
figure her computer address when she logs onto the network. 

It is a still further object of the present invention to 
provide a local area network that protects individual com- 
puters from access by other computers on the network 
50 without requiring reconfiguration of the file sharing options 
on the computer. 

These and other objects of the present invention will 
become apparent to those skilled in the art from the follow- 
ing detailed description of the invention and the accompa- 
55 nying drawings. 

SUMMARY OF THE INVENTION 

The present invention is a method for operating a local 
area network having a server and a plurality of computers. 

60 The server includes an Internet gateway for directing mes- 
sages to and from the Internet. Each computer in the network 
has a unique IP address and a unique network adapter 
address associated with that computer. Each computer deter- 
mines the network adapter address associated with a target 

65 IP address by broadcasting an address resolution protocol 
(ARP) message on the local area network. The ARP includes 
the target IP address and the network adapter address and IP 
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address of the computer broadcasting the ARP. The com- following discussion. One of these addresses corresponds to 

puter having the target IP address responds to an ARP by the Internet gateway 11. Hence, when work-station 16 

sending a response message that includes the network wishes to direct a message to the Internet, work-station 16 

adapter address of the computer having the target IP address. first encapsulates the message in an IP message specifying 

In the present invention, the server stores information iden- 5 its IP address and the IP address associated with the internet 

tifying IP addresses in. a foreign class corresponding to gateway. This message is then further encapsulated in an 

computers not configured for connection to the local area Ethernet message from adapter 17 to adapter 14. 

network. The server responds to each ARP having a target IP When the unpacked IP message reaches server 12, server 

address in the foreign class by returning the network adapter \2 determines the correct routing for the message based on 

address of the server in the response message and assigning 10 the destination IP address. In general, server 12 maintains 

an IP address associated with the local area network to the information, typically in the form of a mask, that allows it 

IP address of the computer sending the ARP. The server to determine if an IP address is part of the local area network 

translates each outbound message originating on the local or corresponds to a computer that must be reached via the 

area network for a destination address in the foreign class Internet. If the IP address is not local, server 12 sends the 

from an originating address for which one of the IP 15 message via the Internet gateway. 

addresses associated with the local area network has been The bindings between the IP address and the Ethernet 
assigned. The translation consists of replacing the IP address addresses are nolf in general, saved when a computer system 
of the computer originating the message with the corre- ^ shut dowQ bindings are re-established the first time 
sponding IP address assigned to that computer. The trans- a computer wishes t0 ^ a meS sage to an IP address after 
lated message is then sent via the gateway. The sever also 20 lha , computer boots up. This method of operation simplifies 
examines each inbound message received on the gateway for the instanation of new hardware by removing the need to 
a destination IP address associated with the local area inform aU computers on tne network when new Ethernet 
network to determine if the destination address is an IP adapters are connected or old ones removed, 
address that has been assigned to an IP address in said WheQ a utcr firsl att ls t0 contacl aDOther 
foreign class. If such an assignment has been made, the 25 it delermines the Ethernet address that pre- 
server replaces the destination IP address in the message tQ ^ Ip b sendi an addr£SS 
with the foreign IP address and sends the inbound message re H solmion tQCol (ARp) message contaming ite IP address , 
on the local area network. its EtherQet address> and {h& tafget ip addfess M E{hctnQ{ 

BRIEF DESCRIPTION OF THE DRAWINGS 30 adapters on the network unpack this message and pass on the 

message to the Ethernet drivers which compare the IP 

FIG. 1 is a block diagram of a local area network addresses associated with their Ethernet adapters to the 

according to the present invention. target IP address. If an IP address matches, a return packet 

DETAILED DESCRIPTION OF THE t^^£^^ ** ^ ^ 

INVENTION 35 Wlth the targ address. 

Consider the case in which work-station 16 boots up and 

The manner in which the present invention achieves its wishes to determine the address of the Ethernet adapter 

advantages may be more readily understood with reference associated with gateway 11. Computer 16 has the IP address 

to FIG, 1 which is a block diagram of a typical local area 0 f the gateway stored in its network configuration data. To 

network 10 that is connected to the internet via a server 12 ^ fi nd the corresponding Ethernet address, work-station 16 

according to the present invention. Server 12 provides file broadcasts an ARP message on network 20. This message 

access and Internet services for the various work-stations contains the IP address of work-station 16, the Ethernet 

connected to network 20. Typical work-stations are shown at address of work -station 16, and the IP address whose Eth- 

16 and 18. ernet address is being sought, i.e., the IP address associated 

Communications on the network take place under a 45 with gateway 11. Each network adapter reads this message 

layered protocol with one layer governing communications and the interface software compares the target IP address 

between hardware network adapters that connect the various with that associated with the computer connected to the 

computers to network 20. The network adapters correspond- network card. If the IP addresses match, a reply message 

ing to computers 12, 16, and 18 are shown at 14, 17, and 19, giving the Ethernet address of the network card is sent back 

respectively. For the purposes of the present discussion, it 50 to the requesting computer. 

will be assumed that the network adapters and wiring Now consider the case in which computer 16 is moved 

implement an Ethernet network. Each network adapter has from its original local area network to a hotel local area 

a unique 6-byte identification code that distinguishes it from network which does not include the present invention. When 

every other adapter constructed to the relevant standard, computer 16 attempts to determine the Ethernet address 

Consider the case in which work-station 16 wishes to send 55 corresponding to the IP address programmed into it for the 

a packet to server 12. The packet is encapsulated in an Internet gateway, an error will occur. This error results from 

Ethernet message, which includes the network adapter iden- the fact that the IP addresses on the hotel network are unique 

tification codes of network adapters 14 and 17. This Ethernet to that network; hence, no computer on the hotel local area 

message is then placed on network 20 by network adapter network will respond to the address resolution protocol 

17. Network adapter 14 and the relevant drivers recognize go message. As noted above, one solution to this problem is to 

the message as being directed to adapter 14 and unpack the provide the mobile computer with a new IP address to use 

packet. The unpacked message is then passed to the next for connecting to the Internet, i.e., the IP address used for 

level which is handled by the server software. such purposes on the hotel's local area network. This 

The second level of the protocol corresponds to the solution, however, requires reprogramming of the user's 

computers on the network. Each computer has one or more 65 computer. 

unique Internet addresses of the form A.B.C.D. Such The present invention avoids this reprogramming by 

addresses will be referred to as "IP addresses" in the utilizing a combination of a translation table and server 
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software that handles invalid IP addresses. The server soft- Next, consider the case in which the mobile user sends a 

ware of the present invention responds to all ARPs message to a workstation that would be on her local area 

addressed to IP addresses that are not local to the hotel network at headquarters. Once again, the user's computer 

network. This foreign class of IP address would generate will send an address resolution packet to determine the 

errors in conventional networks. When server 12 detects 5 Ethernet address of the appropriate adapter card the first 

such an ARP it returns its Ethernet address to the sender and time the user attempts to send a message to the target 

makes an entry in translation table 31, if needed. The entry workstation. Hence, there will be an entry in the translation 

associates a valid IP address on the hotel network with the table for the user's home IP address and the user's machine 

IP address of the originating computer, i.e., the IP address will direct messages to the hotel server's ethernet adapter, 

used by the mobile computer on its home network. Server 12 picks up the message since the destination address 

Server 12 also processes all messages having foreign IP is not local to the hotel local area network. The server 

destinations, i.e., destinations that are not local to the hotel translates the origin IP address from the home IP address of 

local area network. Such messages will always be routed to the user to the hotel IP address associated with it and sends 

server 12, since server 12 will have provided its Ethernet the message via the Internet. The message arrives at the 

address in response to an ARP sent previously by the sender server on the headquarters local area network, since that 

when the sender set up the bindings between the target IP 35 server receives all messages from the Internet for IP address 

address and an Ethernet address as described above. that are local to that network. Hence, the message will be 

To simplify the following discussion, denote the IP properly delivered to the workstation on the headquarters 

address of the mobile user, as stored on her computer, as the workstation, although the origin IP address will be different 

"home IP address" This is the address associated with her ^m the origin IP address that would have been in the 

computer on her local area network at her headquarters. 20 message had the user been connected to the headquarters 

Denote the new address associated with her home IP address network when the message was sent A return message will 

in the translation table as the "hotel IP address". This is an likewise be properly handled since the origin address in the 

IP address that is local to the hotel network. Finally, denote message correctly identifies the hotel server. Once the return 

the IP address contained in a message of the computer to message reaches the hotel server the destination address 

which a message is to be sent as the "destination IP address" is wil1 be translated back to the home IP address of the user and 

and the IP address of the computer sending the message as the message sent to the user on the hotel local area network, 

the "source IP address". As noted above, when the server of It should be noted that the translation process utilized by 

the present invention detects an ARP for a foreign IP address server 12 must also correct the check sums in the message 

on the local area network of the hotel, the server makes an to account for the new IP addresses that are part of the 

entry in the translation table for the home IP address 30 message. In addition, it should be noted that certain older 

contained in the ARP and assigns a corresponding hotel IP message types, specifically File Transfer Protocol (FTP) 

address to be used in place of that home IP address. protocol messages, include ASCII versions of the IP 

Basically, a server according to the present invention addresses embedded within the actual message. Hence, the 
processes a message directed to a non-local IP address by P rcferred embodiment of the present invention tests for such 
translating the source IP address from the home IP address 35 messages, unpacks the entire message, and also translates 
to the hotel IP address and then sending the message on the the internaI c0 P ies of the IP addresses. 
Internet. When the server receives a message from the As noted above, providing a local area network for all 
Internet for a hotel IP address, the server replaces the guests poses certain secunty problems. Once a guest corn- 
destination address with the corresponding home IP address P^er is logged onto the network and assigned appropriate 
and places the message on the local area network at the 40 addresses, that computer, in principle, can access other guest 
hotel. This protocol is sufficient to assure that messages are computers through the network neighborhood commands of 
properly delivered without changing the IP address of the the operating system. If a guest has a computer that has been 
user's computer configured for file sharing, the enabled files and/or drives 

The maimer in which messages reach their correct desti- ma > be accessible to other guests, 

nation can be viewed in terms of two types of messages that 45 To prevent such security problems, the present invention 

are to be sent from the mobile computer that is now utilizes a filter that blocks all broadcast messages that arc not 

connected to the hotel network. First, consider the case in directed to the server. Since a user must use such a broadcast 

which the mobile computer wishes to send a message to a message to determine the relevant information for the other 

server that would normally be reached from the user's computers on the hotel's network, this filter effectively 

headquarters' local area network via the Internet. This so prevents one user from gaining access to another user's 

message will have a source IP address equal to the home IP computer. The filter is included in the switches used to 

address and a destination address that is not within the connect the various computers on network 20, and hence, 

addresses on the hotel local area network. Since the desti- this filter is also transparent to the users of the hotel network, 

nation address is not local, the server at the hotel will pick It should also be noted that the mobile computer user may 

up the message and assume that it is to be sent on the Internet 55 also have an IP address stored for a DNS server that makes 

via the Internet gateway. Before routing the message to the the translation from an ASCII address such as "compuserve- 

Internet gateway, the server changes the source IP address com" to the corresponding IP address on the Internet. Many 

from the home IP address of the mobile computer to the local area networks utilize local servers for this process, and 

hotel IP address. The computer on the Internet with the hence, the IP addresses will also be invalid on the hotel's 

destination IP address eventually receives the message. Any 60 network. These messages are easily detected since they are 

response is sent back on the Internet to the source address directed to a specific"port" on the invalid IP address. In the 

contained in the message, i.e., the hotel IP address. Upon preferred embodiment of the present invention, the server 

receiving the message, the hotel server translates the desti- treats all DNS messages as being directed to an invalid IP 

nation address to the home IP address and places the address and substitutes a valid DNS address associated with 

message on the local area network where it is picked up by 65 the local server. 

the mobile user's computer which recognizes its home IP In the preferred embodiment of the present invention, 

address. entries in the translation table maintained by the server are 
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removed in response to any of a number of conditions. For 
example, when the user checks out of her hotel room, the 
translation table entries corresponding to that room are 
removed. Since the hotel will, in general, have fewer IP 
addresses than rooms, it is also advantageous to purge the 
translation table of entries that are not currently being used 
to free IP addresses. Such purges can be triggered by the 
time that has lapsed since the entry was last used. 
Alternatively, the table can be purged at a predetermined 
time, typically during the hours in which no one would be 
actively using the network. 

The present invention has been described in terms of a 
hotel local area network. However, it will be obvious to 
those skilled in the art from the preceding discussion that the 
teachings of the present invention can be applied to other 
remote local area networks to provide access for visiting 
computer users. 

Various modifications to the present invention will 
become apparent to those skilled in the art from the fore- 
going description and accompanying drawings. 
Accordingly, the present invention is to be limited solely by 
the scope of the following claims. 

What is claimed is: 

1. A method for operating a local area network having a 
server and a plurality of computers including a first 
computer, said server including an Internet gateway, each 
computer in said local area network having a unique IP 
(Internet protocol) address and a unique network adapter 
address associated with that computer, each computer deter- 
mining the network adapter address associated with a target 
IP address by broadcasting an address resolution packet 
(ARP) on said local area network, said ARP including at 
least said target IP address and said network adapter address 
and IP address of said computer broadcasting said ARP, said 
computer having said target IP address responding by send- 
ing a response message that includes said network adapter 
address of said computer having said target IP address, at 
least said first computer being connectable to a home 
network different from said local area network, said method 
comprising the steps of: 

using a first IP address by said first computer when said 
first computer communicates using said home network; 
storing information identifying IP addresses in a foreign 
class corresponding to computers not configured for 
connection to said local area network including storing 
said first IP address of said first computer; 
sending a first communication from said first computer to 
said server; 

causing said server to send a response to each ARP having 
a target IP address in said foreign class, said server 
returning said network adapter address of said server in 
said response message and assigning an IP address 
associated with said local area network to said IP 
address of said computer sending said ARP in said 
response including assigning by said server after 
receiving said first communication from said first com- 
puter a second IP address associated with said local 
area network to said first computer that is different from 
said first IP address of said first computer, said second 
IP address being assigned independently of program 
code provided with said first computer to obtain said 
second IP address; 

causing said server to translate each outbound message 
originating on said local area network for a destination 
address in said foreign class from an originating 
address for which one of said address 1 associated with 
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said local area network has been assigned, including a 
first outbound message, different from said first 
communication, sent to said server by said first com- 
puter using said first IP address, by replacing said first 
IP address of said computer originating said message 
with said corresponding second IP address assigned to 
that computer, said first computer operating at all times 
independently of said second IP address when said first 
computer is connected to said local area network 
including when said first computer sends first outbound 
message to said server; and 
sending said translated outbound messages via said gate- 
way including using said second IP address to send said 
first outbound message from said server via said gate- 
way. 

2. The method of claim 1 further comprising the steps of: 
examining each inbound message received on said gate- 
way for a destination IP address associated with said 
local area network to determine if one of said foreign 
IP addresses has been assigned to said destination 
address, and replacing said destination IP address in 
said inbound message with said foreign IP address if 
such an assignment has been made including replacing 
said second IP address with said first IP address when 
said inbound message is for said first computer; and 

sending said inbound message on said local area network. 

3. The method of claim 1 further comprising the step of 
restricting broadcast messages on said network such that a 
broadcast transmitted by said server will be directed to all 
other computers on said network, but a broadcast transmit- 
ted by said first computer on said local area network will be 
directed only to said server. 

4. The method of claim 1 further comprising the step of 
detecting messages on said local area network directed to a 
predetermined port on a computer in said foreign class and 
replacing said destination address in such messages with a 
predetermined IP address including detecting an inbound 
message for said first computer and replacing said second IP 
address in said message with said first IP address of said first 
computer. 

5. The method of claim 1 wherein said step of translating 
said outbound messages further comprises the step of 
unpacking all messages of a predetermined message type 
and replacing any internal copies of said IP address in said 
foreign class with said assigned IP address. 

6. A method, as claimed in claim 1, wherein: 

said storing step includes storing said second IP address. 

7. A method for communicating using a global computer 
network, comprising: 

establishing a first address associated with a computer that 
can be connected to a first network having a first server 
wherein, when said computer communicates to the 
global computer network using said first network, said 
computer uses said first address; 

connecting said computer to a second network having a 
second server in which said first address is recognized 
by said second server as being different from computers 
that are part of said second network, said step of 
connecting including sending a first communication 
from said computer to said second server and associ- 
ating a global computer network address to said com- 
puter by said second server independently of program 
code provided with said computer to obtain said global 
computer network address; and 

providing a second communication, different from said 
first communication, between said computer and the 
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global computer network, said providing step including 
providing said second communication from said com- 
puter to said second server using a second network 
address and providing said second communication to 
the global computer network by said second server 5 
using said global computer network address, said com- 
puter operating at all times independently of said global 
computer network address when said computer is con- 
nected to said second network and said second com- 
munication is provided independently of said computer 10 
using said global computer network address. 

8. A method, as claimed in claim 7, wherein: 

said sending step includes recognizing by said second 
server that said computer is not part of said second 
network. 15 

9. A method, as claimed in claim 8, wherein: 

said associating step including storing in memory a cor- 
relation between said first address and said global 
computer network address after said sending step. 

10. A method, as claimed in claim 9, further including: 20 
removing from said memory said correlation between said 

first address and said second address after a predeter- 
mined event, wherein said predetermined event is 
defined by a group that includes a predetermined time. 25 

11. A method, as claimed in claim 7, wherein: 

said first communication includes an address resolution 
packet sent to said second server with said first address 
by said computer and said associating step includes 
processing said address resolution packet by said sec- 30 
ond server. 

12. A method, as claimed in claim 11, wherein: 

said associating step includes responding by said second 
server to said computer by including a network adapter 
address of said second server. 35 

13. A method, as claimed in claim 7, wherein: 

said second communication includes a message and said 
providing step includes transmitting said message from 
said second server lo said global computer network. 

14. A method, as claimed in claim 7, wherein: 40 
said second communication includes a message and said 

providing step includes receiving said message includ- 
ing said second network address by said second server. 

15. A method, as claimed in claim 14, wherein: 
said associating step includes translating said second 

network address to said second address by said second 
server and sending said message to said computer using 
said second address. 

16. A method, as claimed in claim 7, further including: 5Q 
preventing access by said computer to substantially any 

other computer on said second network. 

17. A method, as claimed in claim 7, wherein: 

said first network address includes at least one of: being 
the same as said second network address and being 55 
different from said second network address and in 
which said global computer network address is differ- 
ent from said second network address. 



45 



18. An apparatus for communicating using a global com- 
puter network in which a computer has two different 
addresses, comprising: 

a computer having a first address associated with a first 
network wherein, when communicating to the global 
computer network using a first server on said first 
network, said computer uses said first address; and 

a second network to which said computer is connected, 
said second network including a second server, said 
second server associating a global computer network 
address with said computer independently of program 
code provided with said computer to obtain said global 
computer network address; 

wherein said computer, when sending each communica- 
tion to the global computer network using said second 
server, sends said communication to said second server 
using a second network address, and said second server 
changes said second network address to said global 
computer network address in order to send each said 
communication to the global computer network, said 
computer operating at all times independently of said 
global computer network address when connected to 
said second server including when each said commu- 
nication is sent to the global computer network, 

19. An apparatus, as claimed in claim 18, wherein: 
said computer sends an address resolution packet to said 

second server and said second server responds with its 
network adapter address. 

20. An apparatus, as claimed in claim 18, wherein: 
said second server includes memory for storing informa- 
tion related to a correlation between said second net- 
work address and said global computer network 
address. 

21. An apparatus, as claimed in claim 18, wherein: 
said first address is the same as said second network 

address and said second network address is different 
from said global computer network address. 

22. An apparatus, as claimed in claim 18, wherein: 
said second server is used in preventing access to sub- 
stantially any other computer on said second network 
by said computer. 

23. An apparatus, as claimed in claim 18, wherein: 
said second server is used in determining whether a 

predetermined event has occurred for removing infor- 
mation from a memory of said second server related to 
a correlation between said second network address and 
said global network address. 

24. An apparatus, as claimed in claim 23, wherein: 
said predetermined event includes a predetermined time 

including at least one of a predetermined time interval 
related to time elapsed since said second address was 
utilized and a defined time during each day about which 
said information related to said correlation is removed. 
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